bolinette (>=0.5.5, <=0.5.7), coliseum (>=1.0.1, <=1.0.4) +13 more potentially affected by CVE-2025-71176 via pytest (6.1.1)

pytest PYPI version 6.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - bolinette =0.5.5, =1.0.1, =0.1.0, =0.14.0, =0.2.0, =2020.10.25.post2, =1.3.7, =0.0.1, =1.49.24, =1.0.0, =2.1.0, =0.1.20b1, =0.0.4, =0.1.0 Source cve...

bastion-key-client (>=1.0.1, <=1.4.0), fabric-am-handlers (>=0.11.0, <=1.4.0b2) +5 more potentially affected by CVE-2025-61920 via authlib (0.15.2)

authlib PYPI version 0.15.2 is affected by a known vulnerability. The following packages have a transitive dependency on authlib and may be impacted: - bastion-key-client =1.0.1, =0.11.0, =0.14.0, =0.4.0, =0.9.0, =1.0.0b1, =1.0.0 Source cves: CVE-2025-61920 Source advisory: OSV:PYSEC-2026-1203...

bastion-key-client (>=1.0.1, <=1.4.0), fabric-am-handlers (>=0.11.0, <=1.4.0b2) +5 more potentially affected by CVE-2025-59420 via authlib (0.15.2)

authlib PYPI version 0.15.2 is affected by a known vulnerability. The following packages have a transitive dependency on authlib and may be impacted: - bastion-key-client =1.0.1, =0.11.0, =0.14.0, =0.4.0, =0.9.0, =1.0.0b1, =1.0.0 Source cves: CVE-2025-59420 Source advisory: OSV:PYSEC-2026-1200...

abracadabra (0.0.7), bikeshed (>=2.4.0, <=3.4.2) +34 more potentially affected by CVE-2026-55380 via pillow (8.1.1)

pillow PYPI version 8.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - abracadabra 0.0.7 - bikeshed =2.4.0, =1.5.6, =0.11.0, =0.20.0, =0.37.0, =0.9.0, =0.3.0, =0.1.0, =2.0.0, =2.1.1 and more Source cves: CVE-2026-55380...

abracadabra (0.0.7), bikeshed (>=2.4.0, <=3.4.2) +34 more potentially affected by CVE-2026-54059 via pillow (8.1.1)

pillow PYPI version 8.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - abracadabra 0.0.7 - bikeshed =2.4.0, =1.5.6, =0.11.0, =0.20.0, =0.37.0, =0.9.0, =0.3.0, =0.1.0, =2.0.0, =2.1.1 and more Source cves: CVE-2026-54059...

abracadabra (0.0.7), bikeshed (>=2.4.0, <=3.4.2) +34 more potentially affected by CVE-2026-54060 via pillow (8.1.1)

pillow PYPI version 8.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - abracadabra 0.0.7 - bikeshed =2.4.0, =1.5.6, =0.11.0, =0.20.0, =0.37.0, =0.9.0, =0.3.0, =0.1.0, =2.0.0, =2.1.1 and more Source cves: CVE-2026-54060...

bastion-key-client (>=1.0.1, <=1.4.0), fabric-am-handlers (>=0.11.0, <=1.4.0b2) +5 more potentially affected by CVE-2026-44681 via authlib (0.15.2)

authlib PYPI version 0.15.2 is affected by a known vulnerability. The following packages have a transitive dependency on authlib and may be impacted: - bastion-key-client =1.0.1, =0.11.0, =0.14.0, =0.4.0, =0.9.0, =1.0.0b1, =1.0.0 Source cves: CVE-2026-44681 Source advisory: OSV:PYSEC-2026-188...

bastion-key-client (>=1.0.1, <=1.4.0), fabric-am-handlers (>=0.11.0, <=1.4.0b2) +5 more potentially affected by CVE-2026-41425 via authlib (0.15.2)

authlib PYPI version 0.15.2 is affected by a known vulnerability. The following packages have a transitive dependency on authlib and may be impacted: - bastion-key-client =1.0.1, =0.11.0, =0.14.0, =0.4.0, =0.9.0, =1.0.0b1, =1.0.0 Source cves: CVE-2026-41425 Source advisory: OSV:PYSEC-2026-25...

bastion-key-client (>=1.0.1, <=1.4.0), fabric-am-handlers (>=0.11.0, <=1.4.0b2) +5 more potentially affected by CVE-2026-41425 via authlib (0.15.2)

authlib PYPI version 0.15.2 is affected by a known vulnerability. The following packages have a transitive dependency on authlib and may be impacted: - bastion-key-client =1.0.1, =0.11.0, =0.14.0, =0.4.0, =0.9.0, =1.0.0b1, =1.0.0 Source cves: CVE-2026-41425 Source advisory: OSV:GHSA-JJ8C-MMJ3-MMG...

bolinette (>=0.5.5, <=0.5.7), coliseum (>=1.0.1, <=1.0.4) +13 more potentially affected by CVE-2025-71176 via pytest (6.1.1)

pytest PYPI version 6.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - bolinette =0.5.5, =1.0.1, =0.1.0, =0.14.0, =0.2.0, =2020.10.25.post2, =1.3.7, =0.0.1, =1.49.24, =1.0.0, =2.1.0, =0.1.20b1, =0.0.4, =0.1.0 Source cve...

bastion-key-client (>=1.0.1, <=1.4.0), fabric-am-handlers (>=0.11.0, <=1.4.0b2) +5 more potentially affected by CVE-2025-62706 via authlib (0.15.2)

authlib PYPI version 0.15.2 is affected by a known vulnerability. The following packages have a transitive dependency on authlib and may be impacted: - bastion-key-client =1.0.1, =0.11.0, =0.14.0, =0.4.0, =0.9.0, =1.0.0b1, =1.0.0 Source cves: CVE-2025-62706 Source advisory: OSV:GHSA-G7F3-828F-7H7...

bastion-key-client (>=1.0.1, <=1.4.0), fabric-am-handlers (>=0.11.0, <=1.4.0b2) +5 more potentially affected by CVE-2025-61920 via authlib (0.15.2)

authlib PYPI version 0.15.2 is affected by a known vulnerability. The following packages have a transitive dependency on authlib and may be impacted: - bastion-key-client =1.0.1, =0.11.0, =0.14.0, =0.4.0, =0.9.0, =1.0.0b1, =1.0.0 Source cves: CVE-2025-61920 Source advisory: OSV:GHSA-PQ5P-34CR-23V...

abracadabra (0.0.7), bikeshed (>=2.4.0, <=3.4.2) +34 more potentially affected by CVE-2022-22815 via pillow (8.1.1)

pillow PYPI version 8.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - abracadabra 0.0.7 - bikeshed =2.4.0, =1.5.6, =0.11.0, =0.20.0, =0.37.0, =0.9.0, =0.3.0, =0.1.0, =2.0.0, =2.1.1 and more Source cves: CVE-2022-22815...